we shouldn't specify if it was the username or password that's incorrect, just say 'there was a problem with your login'. this will prevent people from being able to determine if an account exists or not. note: check password reset submission. there might be an error message for non existent accounts.
we shouldn't specify if it was the username or password that's incorrect, just say 'there was a problem with your login'. this will prevent people from being able to determine if an account exists or not. note: check password reset submission. there might be an error message for non existent accounts.